I've setup the SSTP server as below, but the strongest cipher suite that's offered is TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (0xc014). That's concerning because both CBC mode and the SHA1 hash are widely regarded as insufficiently secure today. The SSTP client on my Windows 10 PC supports cipher suites with GCM as well as SHA256 and 384 (e.g. TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (0xc030)) so clients would be able to use them, if only RouterOS supported them.

Thanks.

I'll second this. I just span up a stock Windows Server 2022 image on Azure and tried to connect it to an RB 3011 running RouterOS 6.49.2, and it failed to connect because it only supports cipher suites known to be secure out of the box, and _CBC_SHA does not meet that requirement. The error message was typically unhelpful too. I had to manually enable a less secure compatible cipher suite to get any connection at all.

I think the Azure image must be security hardened compared to regular Windows Server 2022 (see https://docs.microsoft.com/en-us/window ... erver-2022) so not a problem for most people.